$ rpki-client -vvf rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft File: UO_h33KRXtM2HbVZtba4Pq4-88A.mft (raw, json) Hash identifier: xmxchU+5vsQ/h3Wcrk/zkVffI7SB8pJZgzBw03IDRio= Subject key identifier: 4B:C1:8C:71:9F:F2:C9:72:5F:70:99:74:01:93:D9:D9:A8:A1:87:9D Authority key identifier: 50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 Certificate issuer: /CN=A9149DF2/serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft Manifest number: 0AE7 Signing time: Tue 24 Mar 2026 19:12:18 +0000 Manifest this update: Tue 24 Mar 2026 19:12:17 +0000 Manifest next update: Tue 31 Mar 2026 19:12:17 +0000 Files and hashes: 1: UO_h33KRXtM2HbVZtba4Pq4-88A.crl (hash: RsBU1NT3OOOoPuPnBUBPCwj+uSmIEAVlpYe5hWnG3LA=) 2: 0357A064679D11EABD681D0FC4F9AE02.roa (hash: bP8YW/usVEPebr8yo+q/K5uFmrIVy5PiorRcfqJheHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149DF2, serialNumber=50EFE1DF72915ED3361DB559B5B6B83EAE3EF3C0 Validity Not Before: Mar 24 19:12:17 2026 GMT Not After : Mar 31 19:12:17 2026 GMT Subject: CN=69c2e212-e038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:8d:e1:ed:4f:26:68:9c:d2:2a:d7:da:a3: 20:4e:f8:9d:94:58:76:0b:7f:0e:d0:68:bd:04:38: cc:2d:5b:8a:f7:42:d4:fd:c0:89:8c:da:77:5f:ec: 6d:c1:28:93:72:ff:db:44:97:1b:95:88:18:ca:68: f3:c5:c6:8b:f8:fc:86:ea:b8:11:d1:ef:c0:c2:83: 5e:a0:86:63:d2:19:47:c8:70:00:72:41:fd:a0:58: f0:a3:0a:bc:fe:29:65:0a:67:7a:d1:c9:94:e6:87: 49:84:39:8b:80:47:dc:67:72:d4:b3:1c:8a:82:9a: a3:9b:47:1c:18:15:59:81:3d:7e:99:30:e2:69:22: 35:0c:f4:5a:c6:9e:0c:b3:41:57:6f:50:a3:70:b8: 42:b3:2e:a3:51:77:ba:bb:c9:64:75:d9:68:58:92: 7e:2f:66:7d:2d:68:25:ad:77:15:b1:17:d7:d6:ab: cf:52:74:c6:63:34:c4:aa:89:3f:0e:8d:a0:70:42: 44:8a:a3:ef:bb:94:13:e5:88:a8:d3:27:da:b3:d3: 34:ae:87:7a:d9:8d:af:53:04:85:e5:66:b4:4f:53: 4d:63:21:b5:3c:d0:ed:14:c6:87:77:fc:e7:38:b5: 4f:a6:96:92:af:db:f8:c1:56:b0:6a:e8:e4:e3:84: 7f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C1:8C:71:9F:F2:C9:72:5F:70:99:74:01:93:D9:D9:A8:A1:87:9D X509v3 Authority Key Identifier: keyid:50:EF:E1:DF:72:91:5E:D3:36:1D:B5:59:B5:B6:B8:3E:AE:3E:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UO_h33KRXtM2HbVZtba4Pq4-88A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149DF2/9998F1C4679B11EA99AA420AC4F9AE02/UO_h33KRXtM2HbVZtba4Pq4-88A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c6:64:1b:d0:22:2b:67:eb:03:e8:6a:d6:00:92:a8:b2:02: 61:51:73:b9:21:77:dc:98:7b:b1:e3:1a:42:4d:af:a4:fd:75: f8:a2:2c:d6:b6:a2:f2:a9:17:69:e1:42:2f:fb:6d:f2:55:79: 93:7a:10:fb:df:6d:29:2e:70:36:5c:77:5c:8e:aa:56:c3:5c: 4a:ae:03:b9:87:59:a0:c7:00:26:a8:3e:48:1d:85:eb:2d:71: cf:37:05:37:b4:ba:82:e3:88:5e:30:b0:02:08:74:4a:cb:de: 2a:6e:9b:22:54:65:09:fa:23:ca:37:4a:7a:cb:31:08:6e:33: 9c:38:9d:13:5a:5a:db:10:f2:31:74:5b:76:7c:63:32:db:30: 9c:75:f8:c7:fc:7e:f6:e8:85:07:1c:f6:d8:a3:42:b1:b8:b7: 00:de:7c:92:ea:5a:e8:1f:64:e6:88:bf:ac:67:cf:eb:18:78: 3d:88:78:f1:1d:c5:7f:dc:e4:90:6d:ec:ed:0c:c2:d3:f3:6a: e5:51:5c:ad:82:08:e1:22:7a:fb:d7:e8:b4:a9:23:25:79:c6: 5f:4f:a7:2e:19:22:8e:b6:9b:df:36:0f:e0:90:87:ff:05:25: 28:cd:00:e6:d6:c7:a7:66:1e:7e:b6:84:f6:6b:dd:b0:04:6c: a7:43:34:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlERjIxMTAvBgNVBAUTKDUwRUZFMURGNzI5MTVFRDMzNjFEQjU1OUI1QjZCODNF QUUzRUYzQzAwHhcNMjYwMzI0MTkxMjE3WhcNMjYwMzMxMTkxMjE3WjAYMRYwFAYD VQQDEw02OWMyZTIxMi1lMDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXON4e1PJmic0irX2qMgTvidlFh2C38O0Gi9BDjMLVuK90LU/cCJjNp3X+xt wSiTcv/bRJcblYgYymjzxcaL+PyG6rgR0e/AwoNeoIZj0hlHyHAAckH9oFjwowq8 /illCmd60cmU5odJhDmLgEfcZ3LUsxyKgpqjm0ccGBVZgT1+mTDiaSI1DPRaxp4M s0FXb1CjcLhCsy6jUXe6u8lkddloWJJ+L2Z9LWglrXcVsRfX1qvPUnTGYzTEqok/ Do2gcEJEiqPvu5QT5Yio0yfas9M0rod62Y2vUwSF5Wa0T1NNYyG1PNDtFMaHd/zn OLVPppaSr9v4wVawaujk44R/aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvBjHGf 8slyX3CZdAGT2dmooYedMB8GA1UdIwQYMBaAFFDv4d9ykV7TNh21WbW2uD6uPvPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OURGMi85OTk4RjFDNDY3 OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0TTJIYlZadGJhNFBxNC04 OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPX2gzM0tSWHRNMkhiVlp0YmE0UHE0LTg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OURGMi85OTk4RjFDNDY3OUIxMUVBOTlBQTQyMEFDNEY5QUUwMi9VT19oMzNLUlh0 TTJIYlZadGJhNFBxNC04OEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAasZkG9AiK2frA+hq1gCSqLICYVFzuSF33Jh7seMaQk2vpP11+KIs1rai8qkX aeFCL/tt8lV5k3oQ+99tKS5wNlx3XI6qVsNcSq4DuYdZoMcAJqg+SB2F6y1xzzcF N7S6guOIXjCwAgh0SsveKm6bIlRlCfojyjdKessxCG4znDidE1pa2xDyMXRbdnxj MtswnHX4x/x+9uiFBxz22KNCsbi3AN58kupa6B9k5oi/rGfP6xh4PYh48R3Ff9zk kG3s7QzC0/Nq5VFcrYII4SJ6+9fotKkjJXnGX0+nLhkijrab3zYP4JCH/wUlKM0A 5tbHp2YefraE9mvdsARsp0M0IQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:35:00 2026 by rpki-client